Seal knowledge 0.2.5 on the Informed Decision delivery pin.

Startup was withheld because the owner moved past 15c330cc. The new seal reviews b4f6373, including local delivery limits and the boolean-preserving dev forwarder at state-hub d61ba32. The unsigned draft was regenerated and not submitted. EMERGENT-WP-0002 stays blocked. Assistant: grok Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
2026-10-03 22:31:14 +02:00 · 2026-10-03 22:31:14 +02:00 · e32a9c5dfe
commit e32a9c5dfe
parent 51c7b69417
15 changed files with 217 additions and 46 deletions
--- a/SCOPE.md
+++ b/SCOPE.md
@ -29,7 +29,7 @@ decisions without widening privilege, and keep root human-controlled.
 ## Current State

 - Canon and reference package: v0.8; Python 3.11+, PyYAML, pytest.
- Knowledge package: v0.2.4 pilot; 14 cards, 24 owners, 69 pinned sources,
+- Knowledge package: v0.2.5 pilot; 14 cards, 24 owners, 69 pinned sources,
  read-only retrieval CLI, sealed exports and provider adapters.
 - Verification: 332 portable tests plus 9 optional real owner-contract tests.
 - Informed Decision unsigned adoption draft and native v0.2 orientation runbook;
@ -68,7 +68,7 @@ acceptance, current wider pilots and rollout/reach keep EMERGENT-WP-0002 blocked
 Release 0.2.4 reviews Informed Decision's published offline intake at
 `15c330cc`. All 24 owners verify as files. The decisions card records empty
 registries, no live listener, and no automatic retry of a creating approval
-without a retained receipt. The unsigned draft binds digest
+without a retained receipt. At that release, the unsigned draft bound digest
 `025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
 See `docs/evidence/2026-10-03-024-offline-intake-repin.md`. Fresh 0.2.4 Codex,
 Claude, and Grok fixture probes answered all 28 scenarios; implementing review
@ -81,3 +81,14 @@ Grok each resumed after the startup marker changed and refused effect authority.
 See `docs/evidence/2026-10-03-024-provider-resume.md`. Compaction, harness
 proof, owner feedback, human adoption, and fleet reach still block
 EMERGENT-WP-0002.
+
+Release 0.2.5 re-pins Informed Decision at `b4f63732` after that owner recorded
+local delivery wiring and state-hub `d61ba32` accepted governed boolean leaves.
+Startup on 0.2.4 was withheld once that pin moved. The decisions card records
+fresh-login/p01 acceptance, the open browser freshness error, empty registries,
+notification without a URL, local posed evidence, write-back left off, and T08
+still waiting on the service account and T05/T06. No listener or submitter
+route is claimed. The unsigned draft binds digest
+`9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f` and is
+unsubmitted. 0.2.4 probes, resumes, and pilots stay pinned to that digest.
+See `docs/evidence/2026-10-03-025-informed-decision-repin.md`.
--- a/docs/adoption-review.md
+++ b/docs/adoption-review.md
@ -96,10 +96,21 @@ renewed for this digest before it can count toward T05 or T07.

 ## Offline intake reconciliation — 0.2.4

-The current unsigned draft binds 0.2.4, digest
+The 0.2.4 unsigned draft bound digest
 `025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
 It reviews published Informed Decision revision `15c330cc`: offline intake
 service, schema-3 ledger, empty registries, and the doctrine constraints on
 retry, PDP eligibility, `view_hash`, `human_control`, and asserted `drafted_by`.
 No live listener or grant is claimed. Whitehat's 0.2.3 library acceptance does
 not cover this seal. See `docs/evidence/2026-10-03-024-offline-intake-repin.md`.
+
+## Informed Decision re-pin — 0.2.5
+
+The current unsigned draft binds 0.2.5, digest
+`9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f`.
+It reviews published Informed Decision revision `b4f63732`: local delivery
+wiring, fresh-login/p01 acceptance, empty registries, and a dev forwarder that
+preserves governed booleans. T08 still waits on the service account and
+T05/T06. No live listener or grant is claimed. 0.2.4 probes and Whitehat's
+0.2.3 library acceptance do not cover this seal. The draft is unsubmitted. See
+`docs/evidence/2026-10-03-025-informed-decision-repin.md`.
--- a/docs/decision-runbook-integration.md
+++ b/docs/decision-runbook-integration.md
@ -83,7 +83,7 @@ historical; it is not silently relabeled as evidence for 0.2.0.

 | Dependency | Current evidence and next step | Live work record |
 | --- | --- | --- |
-| Automated memo submission | An offline intake service, schema-3 ledger, and durable outbox exist. Registries are empty and transports are injected. audit-core `70e4044` registers `informed-decision.memo.posed` locally and is not deployed. state-hub `49eeddb` adds a dev forwarding fixture and a deduplicated notification; no live submitter is registered and the write-back flag stays unset. access-engine `e85f511` adds an offline compact-sitting v8 branch with empty admit sets; the deployed image pin is unchanged. Listener deployment, workload custody, admission activation, and live rollout remain blocked. A creating approval without a retained receipt is not retried. Keep the local draft ready and use the attended route when submission is authorized. Do not mint a submitter grant. | INFD-WP-0005 T05–T08 and T10; EMERGENT-WP-0002 T02/T09 |
+| Automated memo submission | Informed Decision `b4f6373` records local intake delivery: empty registries, notification without a URL, posed evidence, and write-back default off. state-hub `d61ba32` preserves `requires_new_bind`, `required_ack`, and `sealed` in the dev fixture. No live submitter is registered and `INFD_HUB_WRITEBACK` stays unset. audit-core `70e4044` registers `informed-decision.memo.posed` locally and is not deployed. access-engine `e85f511` adds an offline compact-sitting v8 branch with empty admit sets; the deployed image pin is unchanged. Listener deployment, workload custody, admission activation, and live rollout remain blocked. T08 still waits on the service account, grant, and T05/T06. A creating approval without a retained receipt is not retried. Keep the local draft ready and use the attended route when submission is authorized. Do not mint a submitter grant. | INFD-WP-0005 T05–T08 and T10; EMERGENT-WP-0002 T02/T09 |
 | Profile adoption | Owner review must decide accuracy/publication, class/group and the exact submission path. Drafting is already authorized; no human answer or owner assent has been fabricated. | Decision `d20a9750-2b29-534e-8227-fb866581a6ca`; EMERGENT-WP-0002 T02 |
 | Engine execution/index | Automatic step execution, estate index and inter-pack dependencies remain deliberately deferred. Use explicit owner pack paths. No need to implement these to use the preparation pack. | RBT-WP-0006; existing decision `1e517449-2114-4a8f-9c6b-fcdbe977378e` |
 | Runtime enforcement bridge | Pack actor/privilege/authorized_by fields and local waivers are not authenticated owner facts. No external approval/PDP gate plugin is claimed. Future execution requires an exact owner design, not a generic `approved: true` field. | EMERGENT-WP-0002 T06 mapping; RBT-WP-0006 T01/T06 |
@ -130,12 +130,20 @@ Release **0.2.3** re-pins Informed Decision's inventoried workplan at
 `f0c60637`. That note recorded the unadmitted 0.2.2 route and did not change
 intake code.

-Current pilot **0.2.4** reviews the later published offline intake at
+Release **0.2.4** reviews the later published offline intake at
 `15c330cc`, digest
 `025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
-The decisions card now records the empty registries, the blocked live route,
+The decisions card recorded the empty registries, the blocked live route,
 and the refusal to retry a creating approval without a retained receipt.
-The unsigned draft binds this digest and is unsubmitted. 0.2.3 Whitehat
-library acceptance does not extend to this seal. Fresh 0.2.4 provider probes
-are recorded in `docs/evidence/2026-10-03-024-provider-probes.md`. Earlier
-provider reports do not certify this seal.
+0.2.3 Whitehat library acceptance does not extend to that seal. Fresh 0.2.4
+provider probes are recorded in `docs/evidence/2026-10-03-024-provider-probes.md`.
+Earlier provider reports do not certify that seal.
+
+Current pilot **0.2.5** re-pins Informed Decision at `b4f63732`, digest
+`9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f`.
+The decisions card records fresh-login/p01 acceptance, the open browser
+freshness error, empty registries, notification without a URL, local posed
+evidence, write-back left off, and boolean-preserving dev forwarding. T08
+still waits on the service account and T05/T06. The unsigned draft binds this
+digest and is unsubmitted. 0.2.4 probes, resumes, and pilots do not certify
+this seal. No listener or submitter route is claimed.
--- a/docs/decisions/profile-adoption-intake.draft.json
+++ b/docs/decisions/profile-adoption-intake.draft.json
@ -1,7 +1,7 @@
 {
  "kind": "informed-decision.memo-intake",
  "version": 1,
-  "idempotency_key": "emergent-profile-025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3",
+  "idempotency_key": "emergent-profile-9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f",
  "memo_class": "knowledge-profile",
  "review_group": "net-kingdom-admins",
  "drafted_by": "codex@emergent-security (asserted)",
@ -14,15 +14,15 @@
    "principal": "emergent-security",
    "purpose": "Accept only the non-normative knowledge profile boundary",
    "target": {
-      "id": "emergent-security:knowledge:0.2.4:025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3",
+      "id": "emergent-security:knowledge:0.2.5:9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f",
      "type": "knowledge-profile",
      "system": "emergent-security"
    }
  },
  "memo": {
-    "id": "emergent-profile-adoption-0-2-4",
+    "id": "emergent-profile-adoption-0-2-5",
    "version": 1,
-    "question": "Accept Emergent Security knowledge 0.2.4 as a non-normative NetKingdom agent orientation profile?",
+    "question": "Accept Emergent Security knowledge 0.2.5 as a non-normative NetKingdom agent orientation profile?",
    "requested_act": "approve",
    "binding_level": "organizational",
    "brief": "Accept only the orientation boundary of this exact release; operational authority and remaining review gates stay with their owners.",
@ -35,7 +35,7 @@
        "identifiers": []
      },
      "target": {
-        "id": "emergent-security:knowledge:0.2.4:025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3",
+        "id": "emergent-security:knowledge:0.2.5:9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f",
        "kind": "knowledge-profile",
        "label": "Non-normative security orientation",
        "environment": "rehearsal",
@ -49,7 +49,7 @@
      {
        "item_id": "emergent-profile-packet",
        "label": "Profile boundary and limitations",
-        "hash": "sha256:97b7cefc3d00d96f86402e6beb230ecb050ba86361aad9ce7e83b24c5c49e907"
+        "hash": "sha256:0ede0384f381085b256bd1273e8aa19909129dc05c760f5f7348b3763090076a"
      }
    ],
    "highlights": [
@ -76,7 +76,7 @@
    {
      "item_id": "emergent-profile-packet",
      "media_type": "text/markdown",
-      "content": "# Knowledge profile adoption request\n\nAdopt Emergent Security knowledge 0.2.4, release digest 025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3, as a\nnon-normative orientation profile for coding agents in NetKingdom.\n\nThe profile points to existing owners, withholds stale guidance, and separates\nhuman decisions, runtime approvals, PDP decisions, credentials and procedure\nrecords. This asks only to accept that orientation boundary. It does not amend\nowner contracts or authorize operational effects, autonomous execution, root,\ncredential changes or fleet rollout.\n\nAlternatives: return for wording/source corrections; decline this profile;\naccept this exact orientation boundary with the documented evidence limits.\nChanging the reviewed package requires a new review, not reuse of this answer.\n\nEvidence: knowledge/sources.yaml; docs/decision-runbook-integration.md;\ndocs/operational-contracts.md; docs/adoption-review.md; docs/evidence/.\nEarlier provider reports and owner reviews retain their original release pins.\nWhitehat's offline review accepted remediation of the two loaded-package library\nfindings on the 0.2.3 digest, with disclosed shared-session limits. That\nacceptance does not extend to this seal. Continuity and harness proof remain open.\nA fresh 0.2.4 Codex, Claude, and Grok session each answered all 28 scenarios.\nImplementing review found no unsafe authority recommendation. Recipient\nqualifications remain, and that review is not independent ratification.\n0.2.4 reviews Informed Decision at 15c330cc. An offline intake service, ledger,\nand doctrine constraints are documented there. No listener, submitter grant,\ncustody, or live route is claimed. A creating approval without a retained\nreceipt is not retried.\n\nThe draft is unsubmitted. The proposed memo class and review group must be\nconfirmed by the owner; a synthetic test grant proves format only. INFD-WP-0005\nintake rollout remains unfinished. This draft resolves no Statehub decision.\n"
+      "content": "# Knowledge profile adoption request\n\nAdopt Emergent Security knowledge 0.2.5, release digest 9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f, as a\nnon-normative orientation profile for coding agents in NetKingdom.\n\nThe profile points to existing owners, withholds stale guidance, and separates\nhuman decisions, runtime approvals, PDP decisions, credentials and procedure\nrecords. This asks only to accept that orientation boundary. It does not amend\nowner contracts or authorize operational effects, autonomous execution, root,\ncredential changes or fleet rollout.\n\nAlternatives: return for wording/source corrections; decline this profile;\naccept this exact orientation boundary with the documented evidence limits.\nChanging the reviewed package requires a new review, not reuse of this answer.\n\nEvidence: knowledge/sources.yaml; docs/decision-runbook-integration.md;\ndocs/operational-contracts.md; docs/adoption-review.md; docs/evidence/.\nEarlier provider reports and owner reviews retain their original release pins.\nWhitehat's offline review accepted remediation of the two loaded-package library\nfindings on the 0.2.3 digest, with disclosed shared-session limits. That\nacceptance does not extend to this seal. Continuity and harness proof remain open.\nA fresh 0.2.4 Codex, Claude, and Grok session each answered all 28 scenarios.\nImplementing review found no unsafe authority recommendation. Recipient\nqualifications remain, and that review is not independent ratification.\nThose 0.2.4 answers, resume reloads, and four Claude pilots stay pinned to\nthat digest. They are not evidence for this seal. 0.2.5 reviews Informed\nDecision at b4f63732. That revision records local intake delivery,\nfresh-login/p01 acceptance, and a dev forwarder that preserves governed\nbooleans. No listener, submitter grant, custody, or live route is claimed.\nA creating approval without a retained receipt is not retried.\n\nThe draft is unsubmitted. The proposed memo class and review group must be\nconfirmed by the owner; a synthetic test grant proves format only. INFD-WP-0005\nintake rollout remains unfinished. This draft resolves no Statehub decision.\n"
    }
  ]
 }
--- a/docs/evidence/2026-10-03-024-offline-intake-repin.md
+++ b/docs/evidence/2026-10-03-024-offline-intake-repin.md
@ -1,6 +1,10 @@
 # Offline intake reconciliation — knowledge 0.2.4

-Live pilot: **0.2.4**, manifest digest
+The live seal is now 0.2.5. See
+`docs/evidence/2026-10-03-025-informed-decision-repin.md`. This 0.2.4 record
+stays historical.
+
+Historical pilot: **0.2.4**, manifest digest
 `025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`.
 Release 0.2.3, digest
 `60f8811c6b94b30d357a0d9e5022f2a8ea52e69b47138d3a536755f3295310b5`,
--- a/docs/evidence/2026-10-03-025-informed-decision-repin.md
+++ b/docs/evidence/2026-10-03-025-informed-decision-repin.md
@ -0,0 +1,66 @@
+# Informed Decision re-pin — knowledge 0.2.5
+
+Live pilot: **0.2.5**, manifest digest
+`9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f`.
+Release 0.2.4, digest
+`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`,
+remains the historical seal for its provider probes, resume reloads, and four
+Claude pilots. This release does not extend that evidence or Whitehat's 0.2.3
+library acceptance.
+
+## Reviewed source
+
+0.2.4 withheld startup after Informed Decision moved past
+`15c330ccd049cd19c76040e54dae41cd15d1359e`. The published revision is now
+`b4f637326ba3c2526f4648c4c90544948408d53f`, matching `origin/main`. Inventoried
+file bytes match that commit. README, INTENT, the memo schema, and
+`informed_decision/intake.py` are unchanged since 0.2.4. SCOPE and the intake
+spec changed at `ff59199`. The workplan changed again in `b4f6373`.
+
+The owner records that INFD-WP-0006 completed the Authelia fresh-login request,
+with live fresh-login/p01 acceptance. An actionable browser freshness error
+remains open. INFD-WP-0005 has local intake, opt-in scheduled delivery, empty
+registries, notification without a URL, and local posed audit evidence.
+`INFD_HUB_WRITEBACK` stays off. No listener is deployed. T07 is done locally.
+T05, T06, T08, and T10 stay waiting.
+
+## Boolean contract
+
+state-hub `49eeddb` rejected `requires_new_bind`, `required_ack`, and `sealed`
+because `type(True)` is `bool`, not `int`. state-hub
+`d61ba327fa575269a0ea2d7372cd3c62a10d0cc9` accepts a boolean leaf before the
+numeric allow-list. Unknown leaves still raise `invalid_type`. The
+informed-decision cross-repo check submits the real p01 envelope and expects
+those three booleans to survive delivery. Focused state-hub memo tests:
+20 passed. Focused informed-decision intake tests: 46 passed, 3 skipped.
+A later full informed-decision run was 449 passed, 64 skipped, and 4 failed
+outside this change (`waitress` missing, and one access-token audience case).
+No submitter was registered, no token was minted, and the write-back flag
+stays unset. T08 still waits on the service account, reviewed grant, runtime
+forwarding, and T05/T06.
+
+## Package change
+
+`knowledge/cards/decisions.md` now carries the fresh-login acceptance, the open
+browser freshness error, local delivery limits, and boolean-preserving dev
+forwarding. The intake-readiness scenario still asks whether an agent may
+assume `POST /v1/memos` is deployed and register itself. The integration map,
+operational contract, and decision/runbook limit row match this scope. The
+unsigned adoption draft was regenerated for this digest and was not submitted.
+Decision `d20a9750-2b29-534e-8227-fb866581a6ca` remains open.
+
+## Checks
+
+[Source check](2026-10-03-025-source-check.json): 24 owners `verified-files`,
+`ok: true`, `live_state_verified: false`. Startup and the decisions card both
+retrieve as `verified-files` for the Grok audience. Seal and unsigned-draft
+checks pass. Portable tests: 332 passed, 9 skipped. With
+`EMERGENT_OWNER_ROOT=/home/worsch`, the 9 owner-contract tests passed. File
+agreement is not deployment, permission, provider readiness, or adoption.
+
+## Still open
+
+0.2.4 provider probes, resume reloads, and pilots stay on that digest.
+Compaction, a governed harness session, owner feedback, RISK-F-0015, human
+adoption, and fleet reach remain open. EMERGENT-WP-0002 stays blocked on T02,
+T05, T07, T08, T09, and T10. No DoD-Ok is claimed.
--- a/docs/evidence/2026-10-03-025-source-check.json
+++ b/docs/evidence/2026-10-03-025-source-check.json
@ -0,0 +1,33 @@
+{
+  "schema": "emergent.knowledge-check.v1",
+  "version": "0.2.5",
+  "package_digest": "9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f",
+  "sources": {
+    "net-kingdom": "verified-files",
+    "gate-house": "verified-files",
+    "ops-warden": "verified-files",
+    "ops-mason": "verified-files",
+    "access-engine": "verified-files",
+    "security-canon": "verified-files",
+    "user-engine": "verified-files",
+    "tenant-engine": "verified-files",
+    "zone-engine": "verified-files",
+    "whitehat-security": "verified-files",
+    "kings-guard": "verified-files",
+    "secrets-engine": "verified-files",
+    "key-cape": "verified-files",
+    "approval-engine": "verified-files",
+    "informed-decision": "verified-files",
+    "audit-core": "verified-files",
+    "risk-nexus": "verified-files",
+    "info-tech-canon": "verified-files",
+    "ops-bridge": "verified-files",
+    "railiance-master": "verified-files",
+    "glas-harness": "verified-files",
+    "the-custodian": "verified-files",
+    "emergent-security": "verified-files",
+    "runbook-tutorials": "verified-files"
+  },
+  "live_state_verified": false,
+  "ok": true
+}
--- a/docs/netkingdom-integration-map.md
+++ b/docs/netkingdom-integration-map.md
@ -19,7 +19,7 @@ All references are pinned; `knowledge/sources.yaml` also records file hashes and
 | secrets-engine | credential-lifecycle | [README.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/README.md); [docs/ops-warden-routing-contract.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/docs/ops-warden-routing-contract.md); [docs/approval-consumption.md](https://forgejo.coulomb.social/coulomb/secrets-engine/src/commit/3149654609d0c738d05002d2ca08e40e774bbb30/docs/approval-consumption.md) |
 | key-cape | authentication | [README.md](https://forgejo.coulomb.social/coulomb/key-cape/src/commit/672e1faf4b3401ff7bf68bb0b29f8dc50ca51ac6/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/key-cape/src/commit/672e1faf4b3401ff7bf68bb0b29f8dc50ca51ac6/INTENT.md) |
 | approval-engine | approval-facts | [README.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/README.md); [docs/approval-claim.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/docs/approval-claim.md); [docs/approval-consumption.md](https://forgejo.coulomb.social/coulomb/approval-engine/src/commit/901d569757db967a7a595b3d87953b507f002c05/docs/approval-consumption.md) |
-| informed-decision | pep-shaped | [README.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/SCOPE.md) |
+| informed-decision | pep-shaped | [README.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/README.md); [INTENT.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/SCOPE.md) |
 | runbook-tutorials | guided-procedures | [INTENT.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/INTENT.md); [SCOPE.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/SCOPE.md); [docs/pack-spec-v0.2.md](https://forgejo.coulomb.social/coulomb/runbook-tutorials/src/commit/df97fadf5decfcdb5c3c6ab90211226335ffdf8e/docs/pack-spec-v0.2.md) |
 | audit-core | evidence-custody | [README.md](https://forgejo.coulomb.social/coulomb/audit-core/src/commit/fdca5758e16f4eb3e0bbb9e281cf9e5bb5ad7063/README.md); [docs/audit-backend-contract.md](https://forgejo.coulomb.social/coulomb/audit-core/src/commit/fdca5758e16f4eb3e0bbb9e281cf9e5bb5ad7063/docs/audit-backend-contract.md) |
 | risk-nexus | findings | [README.md](https://forgejo.coulomb.social/coulomb/risk-nexus/src/commit/0b3cfb81c65221477f17c05d0916902f690d4427/README.md); [findings/README.md](https://forgejo.coulomb.social/coulomb/risk-nexus/src/commit/0b3cfb81c65221477f17c05d0916902f690d4427/findings/README.md) |
@ -52,7 +52,8 @@ are different kinds of claims. Only the first two were inspected for this invent
 No outside repository was modified by generating this map.

 The detailed decision/procedure integration is in `docs/decision-runbook-integration.md`.
-INFD-WP-0005 has an offline intake service with empty registries. Its live
-listener, custody, admission, and rollout remain that owner's blocked work.
+INFD-WP-0005 has a local intake service with empty registries. Its listener,
+custody, admission, and rollout remain that owner's blocked work. Dev
+forwarding preserves governed booleans and does not admit a submitter.
 Runbook execution and index (RBT-WP-0006) likewise remain owner work. This
 package creates neither capability.
--- a/docs/operational-contracts.md
+++ b/docs/operational-contracts.md
@ -10,7 +10,7 @@ facts; owners must bind security-relevant fields before a protected effect.
 | Find credential route | `warden route find "<need>"`, ops-warden | Need, target, actor, tenant, purpose | Catalog/runbook pointer; absence to routing/construction owner. No credential retrieved. |
 | Request authority | access-engine `POST /v1/check` | Its CheckRequest and verified claims; exact subject/action/resource/context | DecisionEnvelope; verify authentic source, binding and lifetime under PEP contract. Outage follows published PEP stance. |
 | Approval fact | approval-engine claim and consume endpoints | Exact action/target/actor/purpose, validity and supersession | Authenticated claim; consume-before-effect where required; never infer from Statehub prose. |
-| Human question | informed-decision | One unsigned memo, exact requested act, packet hashes, distinct drafting/submitter/reviewer identities | Authenticated human disposition and presentation evidence. Offline intake exists and is not a live listener or submitter route (INFD-WP-0005). No answer is not approval. |
+| Human question | informed-decision | One unsigned memo, exact requested act, packet hashes, distinct drafting/submitter/reviewer identities | Authenticated human disposition and presentation evidence. Local intake and boolean-preserving dev forwarding exist and are not a live listener or submitter route (INFD-WP-0005). No answer is not approval. |
 | Guided procedure | runbook-tutorials engine; pack in procedure owner repo | Pack digest, run ID, resolved scope, actual external approval/PDP prerequisites, check/effect evidence | Local progress and evidence; auto-confirm, waivers and seals do not authorize effects. Execution/index remain RBT-WP-0006. |
 | Credential lifecycle | secrets-engine owner catalog | Current decision and approval contracts, stage/targets, evidence | Scoped lifecycle/delivery path over custody backend; missing prerequisite refuses effect. |
 | Identity/user facts | key-cape / user-engine | Authenticated principal, actor, runtime identity; scoped membership | Claims, not authorization; unresolved binding to owner/delegator. |
--- a/knowledge/cards/decisions.md
+++ b/knowledge/cards/decisions.md
@ -21,10 +21,18 @@ submitter/requester, represented principal, human reviewer, and effect actor.
 Neither is approval-engine's binding digest or access-engine's request digest.

 Current owner evidence: the browser review surface is deployed according to
-its dated SCOPE. INFD-WP-0005 now has an offline intake service, a schema-3
-ledger, and durable notification/write-back jobs. Shipped registries are empty,
-transports are injected, and no listener is deployed. Workload custody,
-admission, audit registration, and live rollout remain blocked. Do not call
+its dated SCOPE. INFD-WP-0006 completed the Authelia fresh-login request, with
+live fresh-login/p01 acceptance. An actionable browser freshness error remains
+open. INFD-WP-0005 has a local intake service, a schema-3 ledger, opt-in
+scheduled delivery, and durable notification/write-back jobs. Shipped registries
+are empty. A notification is a retained State Hub message to the founder with
+memo id, question, class, and submitter. The owner contract prohibits URLs and
+names the signed-in overview as the review entry. Local posed audit evidence
+has receipts, readiness, heartbeat, and reconciliation. The write-back flag
+stays off unless that runtime is explicitly enabled. No listener is deployed.
+Workload custody, attribute admission, submitter registration, and live rollout
+remain blocked. The dev forwarder accepts `requires_new_bind`, `required_ack`,
+and `sealed`, and it does not choose a service account. Do not call
 POST /v1/memos or treat Statehub forwarding as a live submitter route. Prepare
 the unsigned packet locally and use the owner's attended submission route when
 authorized. Never invent client credentials or register yourself as an admitted
--- a/knowledge/catalog.yaml
+++ b/knowledge/catalog.yaml
@ -1,5 +1,5 @@
 schema: emergent.knowledge.v1
-version: 0.2.4
+version: 0.2.5
 status: pilot
 startup_max_bytes: 5500
 cards:
--- a/knowledge/release.yaml
+++ b/knowledge/release.yaml
@ -1,13 +1,13 @@
 schema: emergent.release.v1
-version: 0.2.4
+version: 0.2.5
 trust: repository-reviewed-content; hashes are not signatures
 files:
-  catalog.yaml: 4ae540012779ee0af6b39df1992c8d4159c8dfe30362ea2a35145913540da3a6
-  sources.yaml: d78e7bebeff9508756414cd68f82ff6522103cea4c0923dd6a204f90c1cb0a43
+  catalog.yaml: 02ad68f9456683026517f6d372ed6d13aec5ffbd35e15d2b83a8eea011b78ef5
+  sources.yaml: c001f0b54327c5d3fc7d349a398ba08684473157b752ad5c036e3c8a34ef0cdc
  cards/access.md: 53fb77027593caa45308388b4c6e95c632c759c8014bc5cc52cb249df9c312f3
  cards/compatibility.md: bf78349d59b2e5773706bc5d87853039626d8a2ae784b5f2ae10108b2b9ca3f6
  cards/construction.md: 9b2a770a857d5c258e0175119e39a6251b133b86346bb0384827e276dbff3732
-  cards/decisions.md: d00efb385facb425b81feea1179c9a77ac16ce1ba9d9136cbe5fee1ddf8b4c3c
+  cards/decisions.md: 6defe52e31361e2486a724627e61d1df96bd49282b80c5f0d8d3b4d648363099
  cards/deployment.md: fa17294d5026bcf14271505b28a560faa9c4dc22ad4601f869db6355ecea04e9
  cards/evidence.md: c3477f23ec6dba0b22c137571ce07a6f440dd30f3e49ab1708593421a5b088fa
  cards/findings.md: daef3577d4469c1226c56c5a53df5d3bc3f9bec6d393050878c586455ebab68e
--- a/knowledge/sources.yaml
+++ b/knowledge/sources.yaml
@ -361,7 +361,7 @@ sources:
 - id: informed-decision
  owner: informed-decision
  repository: informed-decision
-  revision: 15c330ccd049cd19c76040e54dae41cd15d1359e
+  revision: b4f637326ba3c2526f4648c4c90544948408d53f
  layer: Staff
  role: pep-shaped
  authority_type: owner-documentation
@ -376,31 +376,31 @@ sources:
  - path: README.md
    sha256: daaaeeaff8cb5bacd378fc768ea10c718f7314db33c485ba1c02c1d6b42e0e20
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/README.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/README.md
  - path: INTENT.md
    sha256: 9b714f4b63b1ffd6079c4515832f3d6daa2f823d395c808f8701261fbed396a3
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/INTENT.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/INTENT.md
  - path: SCOPE.md
-    sha256: c5ddb9983d79c5204d1b4f47835a8faaa0978914cc27787e6ac2192c26588f05
+    sha256: 8716796d1baeecd13e49d854554c6107a06a4f4566230444a752fb58663035fc
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/SCOPE.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/SCOPE.md
  - path: docs/specs/FrictionlessDecisionIntake.md
-    sha256: b695f7fc92f896d81081a6356eb199bad286ef7b433bda2eeb836cb50cc849c4
+    sha256: b9e01901ac2a2f45013bd13cb4004c5c0a156000db73129098b2b958ed8f6dd0
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/docs/specs/FrictionlessDecisionIntake.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/docs/specs/FrictionlessDecisionIntake.md
  - path: workplans/INFD-WP-0005-frictionless-decision-intake.md
-    sha256: 057325746f6453cc0e8a23a6ae38133fb83253300f8e82ad5b7a211b503ce8bb
+    sha256: 4f1b2c0e994033dec7a5e1e56593fa9ea3d9fbb4db4b7f5f9b56c675390abe83
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/workplans/INFD-WP-0005-frictionless-decision-intake.md
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/workplans/INFD-WP-0005-frictionless-decision-intake.md
  - path: schemas/memo-intake.schema.json
    sha256: 93d2cd665dc4e0e4aff9a2d312084244e9a14f811591e5d108b06d0aa10ea500
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/schemas/memo-intake.schema.json
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/schemas/memo-intake.schema.json
  - path: informed_decision/intake.py
    sha256: a733b4b608b9ea90b2c8293901aa14388a0bf0d3719f121038bfdcc1faca2038
    matches_commit: true
-    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/15c330ccd049cd19c76040e54dae41cd15d1359e/informed_decision/intake.py
+    url: https://forgejo.coulomb.social/coulomb/informed-decision/src/commit/b4f637326ba3c2526f4648c4c90544948408d53f/informed_decision/intake.py
 - id: audit-core
  owner: audit-core
  repository: audit-core
--- a/tools/build_adoption_draft.py
+++ b/tools/build_adoption_draft.py
@ -44,10 +44,12 @@ acceptance does not extend to this seal. Continuity and harness proof remain ope
 A fresh 0.2.4 Codex, Claude, and Grok session each answered all 28 scenarios.
 Implementing review found no unsafe authority recommendation. Recipient
 qualifications remain, and that review is not independent ratification.
-0.2.4 reviews Informed Decision at 15c330cc. An offline intake service, ledger,
-and doctrine constraints are documented there. No listener, submitter grant,
-custody, or live route is claimed. A creating approval without a retained
-receipt is not retried.
+Those 0.2.4 answers, resume reloads, and four Claude pilots stay pinned to
+that digest. They are not evidence for this seal. 0.2.5 reviews Informed
+Decision at b4f63732. That revision records local intake delivery,
+fresh-login/p01 acceptance, and a dev forwarder that preserves governed
+booleans. No listener, submitter grant, custody, or live route is claimed.
+A creating approval without a retained receipt is not retried.

 The draft is unsubmitted. The proposed memo class and review group must be
 confirmed by the owner; a synthetic test grant proves format only. INFD-WP-0005
--- a/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
+++ b/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md
@ -733,3 +733,30 @@ The deployed image pin is unchanged. This is not live admission.

 T02, T05, T07, T08, T09, and T10 stay **wait**. The plan stays **blocked**.
 No DoD-Ok is claimed.
+
+
+## Informed Decision re-pin — knowledge 0.2.5, 2026-10-03
+
+0.2.4 startup was withheld because Informed Decision moved from `15c330cc` to
+`ff59199`. That published diff records INFD-WP-0006 fresh-login/p01 acceptance,
+an open browser freshness error, local T07 delivery, and a state-hub contract
+defect: `_bounded_tree` rejected schema booleans.
+
+state-hub `d61ba327fa575269a0ea2d7372cd3c62a10d0cc9` accepts `bool` before the
+numeric allow-list. Focused memo tests: 20 passed. informed-decision
+`b4f637326ba3c2526f4648c4c90544948408d53f` now expects the real p01 envelope to
+be delivered with `requires_new_bind`, `required_ack`, and `sealed` preserved.
+INFD-WP-0005-T08 stays **wait** on the service account, reviewed grant, runtime
+forwarding, and T05/T06. Nothing was deployed. `INFD_HUB_WRITEBACK` stays unset.
+No submitter was registered.
+
+Pilot **0.2.5**, digest
+`9e186dbd6f2d5eb455bca24db4b03cd866c63c4e94660430dd15f2ca9856215f`.
+All 24 owners verify as files. Startup and `decisions` retrieve as
+`verified-files`. The unsigned draft was regenerated and not submitted.
+0.2.4 probes, resumes, pilots, and Whitehat's 0.2.3 library acceptance do not
+certify this seal. Evidence:
+`docs/evidence/2026-10-03-025-informed-decision-repin.md`.
+
+T02, T05, T07, T08, T09, and T10 stay **wait**. The plan stays **blocked**.
+No DoD-Ok is claimed.